[dpage]

Summary

Go releases before 1.26.10 (and 1.27.3) still trust eight compromised eMudhra intermediate CAs (CVE-2026-111943); 1.26.10 adds them to the crypto/x509 denylist, and older Go lines get no fix. This raises the go directive in both modules (root and cmd/compactor) to 1.26.10, which CI and the release workflow pick up through go-version-file: go.mod, and pins the walkthrough archiver image to golang:1.26.10-alpine.

Verified locally with go build, go vet and go test -short in both modules. ./run-ci-local.sh (pg_regress and journey) was not run.

Checklist

• ./run-ci-local.sh passes (gofmt, golangci-lint, build, pg_regress,
  journey)
• Tests added/updated (test-first)
• Docs updated where applicable (README / USAGE / INSTALL / ARCHITECTURE)
• Bakery / mesh / distributed changes: TLA+ model updated and TLC
  re-checked (docs/formal/)
• Commit messages are short and imperative

Related issues

None.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: pgEdge/coldfront
• Branch: fix/emudhra-ca-distrust
• File: .coderabbit.yaml
• Commit: af74a29
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Team
• Run ID: 73d5c23b-6dc2-4b2b-9ce4-25e7a98249f4

Commits

Reviewing files that changed from the base of the PR and between d4a0463 and af74a29.

Files selected for processing: 4

• cmd/compactor/go.mod
• docs/installation.md
• examples/walkthrough/Dockerfile.archiver
• go.mod

Included review availability: This review used your included allowance. 0 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 8 reviews per hour.

Walkthrough

The Go version is updated to 1.26.10 in the module directives, installation prerequisites, and archiver Docker build image.

Changes: Go version alignment

Layer / File(s)	Summary
Update Go version requirements go.mod, cmd/compactor/go.mod, docs/installation.md, examples/walkthrough/Dockerfile.archiver	The module directives and installation documentation now specify Go 1.26.10. The Docker build image tag changes to golang:1.26.10-alpine.

Priority: Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: vyruss

Merge Risk: Minimal · up to af74a

The version alignment is ready to merge, subject to normal checks.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies the main change: updating Go to 1.26.10 to address the eMudhra CA distrust issue.
Description check		The description directly explains the Go version updates, the security reason, affected files, validation performed, and testing not run.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within survi…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (4 skipped: 4 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}